Privacy in Lisa

In brief

Documents you upload are stored in your account. When you request AI extraction, the selected file is sent to OpenAI after you confirm the information in the app.
You check and correct the extracted information. Bookkeeping functions require your approval.
Apple handles Lisa Pro payments. RevenueCat helps us with purchase status, subscription access and subscription statistics.
You can request deletion under “Konto” (Account). Cancel any Apple subscription separately and save required accounting data before deleting the account.

Responsible business and contact

Mathisen Dynamics, a sole proprietorship with organisation number 926 640 658, provides Lisa. Business address: Rosenbergveien 15, 0963 Oslo, Norway. Postal address: Postboks 1751 Vika, 0122 Oslo. Privacy contact: post@mathisen-dynamics.no.

We are the controller for customer accounts, subscriptions, our support service and secure operation. When a business uses Lisa to process personal data in its own accounts, that business determines the purpose of the processing. Mathisen Dynamics then processes the material on its behalf. A data processing agreement must be in place for such use; contact us before entering personal data on behalf of a business.

Visits to this website and general enquiries are also covered by the website privacy notice.

Information processed

Account and sign-in: email address, user ID, optional display name and information needed for passwords, email verification and access recovery.
Documents: PDF, JPEG and PNG files you choose to upload; filename, type, size, timestamps, processing status and duplicate-detection information.
Extraction and follow-up: document type, supplier or counterparty, dates, amounts, currency, VAT, reference, accounting period, review notes, corrections and document-related cases.
Bookkeeping and bank import: company name, chart of accounts, proposals, approvals, journal entries, reversals and bank transactions you import. Bank imports process dates, amounts, currency and references. Reports use the information you enter.
Subscription: user ID, product, purchase and transaction history, status, renewals and access periods. Apple handles the payment method; we do not receive your card number from Apple.
Technical information: requests, IP address and technical operational, error and security logs held by our service providers. Error logs may contain request or document references.
Customer support: contact details and information you provide when requesting help.

Accounting documents may contain information about you and others. Only select material you have the right to process and share. Avoid national identity numbers, health data and other information unnecessary for the task. Lisa does not need access to your entire photo library or inbox to process a selected file.

Why we use the information

Accounts, authentication, document storage, extraction and user-requested bookkeeping functions deliver the service you request. Where you are a contracting party, processing is necessary for the contract under GDPR Article 6(1)(b).

Operation, troubleshooting, abuse prevention and limited subscription statistics rely on our legitimate interest in operating, securing and understanding use of the subscription service under point (f). The same applies to following up business-customer contacts. You may object to processing based on legitimate interests.

Information necessary for Mathisen Dynamics’ own statutory accounting and documentation obligations is processed under point (c). This does not give us a general right to retain all accounting material you upload.

For personal data processed on behalf of a business customer, the customer must have a valid legal basis. Permission for AI processing in the app is an explicit choice to share with OpenAI; it does not replace the customer’s responsibility for other people’s data.

When you use AI extraction

Before you start, Lisa shows that the document will be sent to OpenAI. You confirm the information and select “Last opp og send til AI” (Upload and send to AI). The selected file and extraction instructions are sent through the Lisa server. The result is stored in your account for review and correction. Repeating extraction sends the document again.

Extraction uses OpenAI’s API. Under OpenAI’s API terms, API data is not used for model training by default; training requires a separate data-sharing choice. Lisa requests that the API answer not be saved as a retrievable response by the provider. This does not mean all processing is storage-free.

OpenAI describes normal retention of up to 30 days in abuse-monitoring logs, potentially longer for legal requirements or necessary security measures. Temporary technical storage and separate image/file-screening rules may also apply. We therefore do not promise zero retention at OpenAI. See OpenAI’s information on API data and retention.

You can choose not to start further AI extractions. This does not revoke processing already performed. Contact us about deletion. AI can produce incorrect or incomplete results; comparison with the original is necessary. Lisa does not independently make decisions producing legal or similarly significant effects for you.

Providers and access

Supabase: sign-in, account data, database and private storage of original documents. Data processing agreement.
Render: hosting the Lisa server for requests, document processing and technical logs. Data processing agreement.
OpenAI: the selected file and information needed for AI extraction. Data processing agreement.
RevenueCat: user ID and purchase/subscription information for access control, purchase validation and subscription statistics. RevenueCat does not receive your accounting documents through this integration. Data processing agreement.
Apple: purchases, payments, receipts and Apple subscription administration. Apple processes store and payment information under its own terms. Apple privacy information.
one.com: email sent to support. Enquiries may also be stored on our work devices. Data processing agreement.

Access to customer data must be limited to people and providers needing it for the task. Data may also be disclosed where required by law or necessary for specific legal claims.

Processing outside the EEA

Providers’ international operations and subprocessors may involve processing outside the EEA, including the USA. Processing exclusively in Norway or the EEA is therefore not guaranteed.

Provider agreements define safeguards for international transfers, including EU standard contractual clauses and, where conditions are met, adequacy decisions. The documents linked above describe recipients, subprocessors and transfer arrangements. Contact us for information about transfers of your data and copies of relevant safeguards.

Retention periods

Account, originals, extractions and accounting data: retained while the account exists. An expired subscription or uninstalling the app does not delete the account. Deletion starts under “Konto” (Account) or by contacting us.
Subscription information: used while purchases, renewals, access, restoration or a specific purchase issue need handling. Account deletion removes the local access association. Information at RevenueCat and Apple is not automatically deleted by that action; see deletion below.
Customer support: routine enquiries are deleted once the matter and follow-up are complete, within 12 months of the last relevant contact. Necessary records in an ongoing dispute may remain until resolution.
Technical logs and backups: retention follows each provider’s logging and backup arrangements. Deletion from the active database does not necessarily delete every copy simultaneously. Periods depend on provider, service plan, log type and whether data must be preserved for a specific error or security incident. No single verified deadline covers all copies; contact us for details of your situation.
OpenAI: specific rules for API retention and abuse logs are explained under AI extraction.
Statutory records: limited information about our own transactions may be kept for the period required by law. This does not automatically cover the customer’s entire document archive.

Lisa does not replace your own retention of original documents and required accounting records. Keep these outside the app.

Deleting accounts and information

Open “Konto → Slett Lisa-kontoen” (Account → Delete Lisa account). Read the information, save the material you need, tick the confirmations and type SLETT before selecting “Slett konto permanent” (Permanently delete account).

Once deletion completes, original files, the user account and associated profiles, extractions, corrections, cases and bookkeeping data are removed from Lisa’s active storage. Bookkeeping data includes companies, charts of accounts, journal entries, bank imports and reconciliation. Downloading originals is not a complete export of this data.

If the app says deletion is pending or could not be confirmed, data may remain. Try later or contact us. Do not assume everything is deleted until you receive confirmation.

Limited technical records of deletion and subscription-event processing may remain after the link to the deleted user is removed. Logs and backups follow the arrangements above.

Account deletion does not automatically send a deletion command to RevenueCat or cancel with Apple. Contact us for follow-up on information held by our processors; we assess and handle requests under deletion rules. Apple handles its own purchase and payment data under its privacy policy.

Cancel your Apple subscription separately. Use iPhone settings or Apple’s subscription overview. Deleting the Lisa account or app does not itself stop Apple renewals.

Your rights

You may request access to your information and correction of errors. You may request deletion where conditions are met, and restriction, for example while accuracy or an objection is investigated. Data required by law or for a specific legal claim may be exempt from deletion.

For data you provided that is processed automatically on the basis of contract or consent, you may request portability in a structured format. This is not a general right to all internal assessments or other people’s information.

You may object to processing based on legitimate interests, including limited subscription statistics. We then assess whether processing must stop. Where processing is based on consent, you may withdraw it for future processing without changing the lawfulness of earlier processing.

Contact post@mathisen-dynamics.no. We may request necessary identity verification, but not passwords or one-time codes. We normally respond within one month. If a lawful extension is necessary, we explain the reason and notify you.

If your enquiry concerns personal data in a business customer’s documents, we assist that customer as the controller. You may also complain to Datatilsynet (Norwegian Data Protection Authority).

Local storage, security and changes

Lisa stores the sign-in session locally on your device so you can remain signed in. This supports app functionality. The app uses no advertising pixels or tracking-based advertising. RevenueCat subscription statistics are described above.

Document access is tied to your account, originals are kept in private storage, and server keys are not placed in the app. These are safeguards, not a guarantee against every incident. Report potential security issues to our contact address without sending passwords or complete customer documents.

This page is updated when processing or features change. The date appears at the top. For significant changes affecting you, we provide clear information in the app or directly when necessary.